Hello, ISPConfig Version: 2.2.36 on OpenSUSE 10.2. Turned on smtp authorization on my server. After about 3 weeks it started sending spam from account with authorization. If I turn off authorization (permit only mynetworks) it stops. Is it possible to check from which account/user spam is sending? In logs I have only ip addresses. Sry for my english. TIA
The log should also contain the information when a user authenticates with smtp-auth. So when the spam sending starts, there should be a line with the username of the authenticated user. This line is just at the beginning of of a spam send interval and not before every spam mmessage, so you might search a bit in the log to see when new spam gets sended and then look which user has authenticated right before the spam starts.
